Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: XqhGXL/DvjLkgenf8ge7WmaqYIEzOkIBg94VKadIs+k=
Subject key identifier: B9:CB:17:89:23:86:78:34:37:36:A3:D2:F4:DE:D4:9C:0C:DD:28:6E
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 019D9A06B932B9C59891213CAD37FD45FE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 062D
Signing time: Fri 17 Apr 2026 06:00:25 +0000
Manifest this update: Fri 17 Apr 2026 06:00:25 +0000
Manifest next update: Sat 18 Apr 2026 06:00:25 +0000
Files and hashes: 1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: 1YZx7IQkvJjAPFjEASMjY3/OkA/3CiqDTeiSGQkC+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b9:32:b9:c5:98:91:21:3c:ad:37:fd:45:fe:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Apr 17 06:00:25 2026 GMT
Not After : Apr 18 06:00:25 2026 GMT
Subject: CN=b9cb1789238678343736a3d2f4ded49c0cdd286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a2:3e:52:f5:86:60:44:66:cf:af:a6:2d:25:
39:58:ca:fb:b0:3f:d9:ed:24:46:1c:59:84:19:6d:
5b:ba:56:62:76:f9:cf:6d:2a:63:cb:b8:86:d6:ae:
90:5e:b0:a8:d3:63:ee:dd:9e:b7:9f:34:95:ea:81:
06:48:34:6b:67:31:87:bc:f5:ed:68:bb:5a:a7:5b:
da:ab:28:f0:12:41:e3:cc:fc:f8:d8:dc:d7:05:b3:
40:04:e1:85:e9:09:7c:42:4b:e7:a4:c0:bc:96:ae:
a7:29:99:d9:d7:a0:55:23:1a:85:29:7b:11:27:28:
8e:fd:9b:ad:a7:da:14:f0:e9:cd:da:40:37:db:75:
26:f0:fe:37:09:fa:03:25:56:40:32:92:90:64:64:
04:e8:46:1c:df:d8:a2:26:0c:6d:46:65:3a:59:a7:
82:45:f9:00:98:38:3e:96:9a:57:8a:2e:e8:46:71:
65:92:32:46:38:82:87:02:0a:9f:fd:fa:aa:87:a1:
ab:9f:69:a3:c7:00:d3:ff:63:26:7a:06:ff:f5:02:
fb:1f:0f:45:e3:fc:29:09:11:46:33:21:1f:3d:f5:
c3:74:83:d8:66:5c:03:b9:29:57:d5:10:8f:42:24:
be:f3:cc:4b:f5:9a:79:6c:d3:23:41:ad:40:1a:a2:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CB:17:89:23:86:78:34:37:36:A3:D2:F4:DE:D4:9C:0C:DD:28:6E
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:72:bf:fc:df:5d:67:78:52:72:c5:01:54:d8:8e:ac:d0:73:
d6:56:b2:be:06:30:3a:d3:81:5d:b3:e2:63:43:63:88:15:8c:
22:35:9e:12:0e:f1:5f:32:42:02:9e:64:81:4e:8d:25:6c:24:
a8:f3:26:30:d9:38:0f:0e:05:47:db:a5:15:d1:56:2f:72:61:
93:ae:a7:4e:0b:ee:ed:08:66:67:69:e6:ef:5f:2a:2c:32:47:
66:82:ee:1e:65:61:06:3d:7c:1d:db:7c:c0:28:89:c9:3b:ff:
3e:c7:e9:c3:5c:60:6b:3d:5f:16:1e:24:f0:21:f3:67:a1:7b:
22:0e:72:f5:bb:a2:2e:68:2a:f8:15:3a:ef:88:84:79:22:45:
3b:8b:e4:99:74:d4:e1:5b:ab:4f:b1:a6:11:f0:f6:34:a5:dd:
88:69:35:0d:2a:eb:a0:20:2f:4f:ed:0c:09:45:83:eb:46:5f:
96:c3:49:a2:df:44:e3:e8:00:1e:35:5d:4b:60:27:16:04:fb:
7a:66:0f:ec:65:35:eb:dc:90:af:39:fc:84:d1:b1:57:13:41:
34:1d:a0:d9:7a:21:28:91:da:a8:2c:da:15:91:a7:84:15:c0:
8d:34:d9:55:2c:0c:9c:cb:50:1f:42:5b:4a:ba:cc:03:1b:4f:
64:3c:29:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:36 2026 by rpki-client